

You might want to switch to rootless quadlets with subuids
https://www.golinuxcloud.com/rootless-podman-quadlet/
You’ll get unified logging through systemctl and journalctl, you’ll also get segmented user space and if you need persistent storage that you can gate at subuid.







Using OpenBao as my CA so I’ve had 24hr certs for a while now.